Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2015
January

CVEs published in January 2015

682 vulnerabilities, 42 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

kde kde-workspace, plasma-workspace +1 morekde-workspace 4.2.0 and plasma-workspace before 5.1.95 allows remote attackers to obtain input...CVE-2015-13084.3 MediumJanuary 26, 2015
kde plasma-workspaceplasma-workspace before 5.1.95 allows remote attackers to obtain passwords via a Trojan horse...CVE-2015-13074.3 MediumJanuary 26, 2015
infinite automation systems mango automationMultiple cross-site scripting (XSS) vulnerabilities in data_point_details.shtm in Mango...CVE-2015-11794.3 MediumJanuary 26, 2015
qualiteam x-cartMultiple cross-site scripting (XSS) vulnerabilities in cart.php in X-Cart 5.1.8 and earlier allow...CVE-2015-11784.3 MediumJanuary 26, 2015
mantisbtSQL injection vulnerability in manage_user_page.php in MantisBT before 1.2.19 and 1.3.x before 1...CVE-2014-95736.0 MediumJanuary 26, 2015
mantisbtMantisBT before 1.2.19 and 1.3.x before 1.3.0-beta.2 does not properly restrict access to /*...CVE-2014-95727.5 HighJanuary 26, 2015
mantisbtCross-site scripting (XSS) vulnerability in admin/install.php in MantisBT before 1.2.19 and 1.3.x...CVE-2014-95714.3 MediumJanuary 26, 2015
midgard-project midgard2, opensuse +1 moreThe default D-Bus access control rule in Midgard2 10.05.7.1 allows local users to send arbitrary...CVE-2014-81487.2 HighJanuary 26, 2015
php, apple mac os x +1 moreThe build_tablename function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP through 5...CVE-2015-1352Fix available5.0 MediumJanuary 26, 2015
php, apple mac os x, oracle linux +2 more +4 moreUse-after-free vulnerability in the _zend_shared_memdup function in zend_shared_alloc.c in the...CVE-2015-1351Fix available7.5 HighJanuary 26, 2015
aircrack-ngnetwork.c in Aircrack-ng before 1.2 Beta 3 allows remote attackers to cause a denial of service ...CVE-2014-8324Fix available7.5 HighJanuary 24, 2015
aircrack-ngbuddy-ng.c in Aircrack-ng before 1.2 Beta 3 allows remote attackers to cause a denial of service ...CVE-2014-8323Fix available7.5 HighJanuary 24, 2015
aircrack-ngStack-based buffer overflow in the tcp_test function in aireplay-ng.c in Aircrack-ng before 1.2...CVE-2014-8322Public exploitFix availableEPSS 23.9%9.8 CriticalJanuary 24, 2015
polarssl, opensuse +1 moreThe asn1_get_sequence_of function in library/asn1parse.c in PolarSSL 1.0 through 1.2.12 and 1.3.x...CVE-2015-1182Fix available7.5 HighJanuary 24, 2015
enhancesoft osticketCross-site scripting (XSS) vulnerability in client.inc.php in osTicket before 1.9.5.1 allows...CVE-2015-13474.3 MediumJanuary 23, 2015
pxz project pxzRace condition in pxz 4.999.99 Beta 3 uses weak file permissions for the output file when...CVE-2015-12002.1 LowJanuary 23, 2015
eventsentryCross-site scripting (XSS) vulnerability in the Web Reports in EventSentry 3.1.0 allows remote...CVE-2015-11804.3 MediumJanuary 23, 2015
enhancesoft osticketCross-site scripting (XSS) vulnerability in upload/scp/tickets.php in osTicket before 1.9.5...CVE-2015-11764.3 MediumJanuary 23, 2015
xiph vorbis-tools, opensuse +1 moreoggenc/oggenc.c in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (out...CVE-2014-9640Fix available5.0 MediumJanuary 23, 2015
xiph vorbis-tools, fedoraproject fedora, opensuse +2 moreInteger overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of...CVE-2014-9639Fix available5.0 MediumJanuary 23, 2015
xiph vorbis-tools, fedoraproject fedora, opensuse +2 moreoggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (divide-by-zero...CVE-2014-9638Fix available5.0 MediumJanuary 23, 2015
redhat openstack, openstack image registry and delivery service \(glance\) +1 moreOpenStack Glance Bypass the storage quota and Denial of serviceCVE-2014-9623Fix available4.0 MediumJanuary 23, 2015
genetechsolutions pie registerThe Pie Register plugin before 2.0.14 for WordPress does not properly restrict access to certain...CVE-2014-8802Public exploit5.0 MediumJanuary 23, 2015
debian linux, linux kernel, canonical ubuntu linux +3 more +5 moreThe em_sysenter function in arch/x86/kvm/emulate.c in the Linux kernel before 3.18.5, when the...CVE-2015-0239Fix available4.4 MediumJanuary 23, 2015
google chromeOpenJPEG before r2944, as used in PDFium in Google Chrome before 40.0.2214.91, allows remote...CVE-2014-7947Fix available5.0 MediumJanuary 22, 2015
google chromeOpenJPEG before r2908, as used in PDFium in Google Chrome before 40.0.2214.91, allows remote...CVE-2014-7945Fix available5.0 MediumJanuary 22, 2015
google chromeThe sycc422_to_rgb function in fxcodec/codec/fx_codec_jpx_opj.cpp in PDFium, as used in Google...CVE-2014-7944Fix available5.0 MediumJanuary 22, 2015
google chrome, chromium, opensuse +4 more +6 moreThe SelectionOwner::ProcessTarget function in ui/base/x/selection_owner.cc in the UI...CVE-2014-7941Fix available5.0 MediumJanuary 22, 2015
google chrome, chromium, opensuse +4 more +6 moreGoogle Chrome before 40.0.2214.91, when the Harmony proxy in Google V8 is enabled, allows remote...CVE-2014-7939Fix available4.3 MediumJanuary 22, 2015
google chromeUse-after-free vulnerability in the ZoomBubbleView::Close function in browser/ui/views...CVE-2014-7936Fix available6.8 MediumJanuary 22, 2015
google chromeUse-after-free vulnerability in browser/speech/tts_message_filter.cc in the Speech implementation...CVE-2014-7935Fix available7.5 HighJanuary 22, 2015
sap enterprise resource planningThe Dealer Portal in SAP ERP does not properly restrict access, which allows remote attackers to...CVE-2015-13127.5 HighJanuary 22, 2015
sap hana extended application servicesThe Extended Application Services (XS) in SAP HANA allows remote attackers to inject arbitrary...CVE-2015-131110.0 HighJanuary 22, 2015
sybase adaptive server enterpriseSQL injection vulnerability in SAP Adaptive Server Enterprise (Sybase ASE) allows remote...CVE-2015-13107.5 HighJanuary 22, 2015
sap netweaver abapXML external entity vulnerability in the Extended Computer Aided Test Tool (eCATT) in SAP...CVE-2015-13095.0 MediumJanuary 22, 2015
prestashopCross-site scripting (XSS) vulnerability in blocklayered-ajax.php in the blocklayered module in...CVE-2015-11754.3 MediumJanuary 22, 2015
ipass open mobileThe client in iPass Open Mobile before 2.4.5 on Windows allows remote authenticated users to...CVE-2015-0925Public exploitFix availableEPSS 52.2%9.0 HighJanuary 22, 2015
cisco unified communications managerAbsolute path traversal vulnerability in the Real-Time Monitoring Tool (RTMT) API in Cisco...CVE-2014-8008Public exploit6.8 MediumJanuary 22, 2015
google chrome, v8, canonical ubuntu linux +1 more +3 moreMultiple unspecified vulnerabilities in Google V8 before 3.30.33.15, as used in Google Chrome...CVE-2015-1346Fix available7.5 HighJanuary 22, 2015
google chrome, canonical ubuntu linux, chromium +2 moreMultiple unspecified vulnerabilities in Google Chrome before 40.0.2214.91 allow attackers to...CVE-2015-1205Fix available7.5 HighJanuary 22, 2015
jasper project jasper, debian linux, opensuse +1 more +3 moreMultiple stack-based buffer overflows in jpc_qmfb.c in JasPer 1.900.1 and earlier allow remote...CVE-2014-8158Fix availableEPSS 14.4%6.8 MediumJanuary 22, 2015
jasper project jasper, debian linux, opensuse +1 more +3 moreOff-by-one error in the jpc_dec_process_sot function in JasPer 1.900.1 and earlier allows remote...CVE-2014-8157Fix availableEPSS 16.9%7.5 HighJanuary 22, 2015
google chromeThe AppCacheUpdateJob::URLFetcher::OnResponseStarted function in content/browser/appcache...CVE-2014-7948Fix available4.3 MediumJanuary 22, 2015
google chromeThe RenderTable::simplifiedNormalFlowLayout function in core/rendering/RenderTable.cpp in Blink,...CVE-2014-7946Fix available5.0 MediumJanuary 22, 2015
google chrome, canonical ubuntu linux, chromium +5 more +7 moreSkia, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of...CVE-2014-7943Fix available5.0 MediumJanuary 22, 2015
google chrome, canonical ubuntu linux, chromium +5 more +7 moreThe Fonts implementation in Google Chrome before 40.0.2214.91 does not initialize memory for a...CVE-2014-7942Fix available7.5 HighJanuary 22, 2015
google chrome, icu-project international components for unicode +1 moreThe collator implementation in i18n/ucol.cpp in International Components for Unicode (ICU) 52...CVE-2014-7940Fix available7.5 HighJanuary 22, 2015
google chromeThe Fonts implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a...CVE-2014-7938Fix available7.5 HighJanuary 22, 2015
ffmpeg, google chrome +1 moreMultiple off-by-one errors in libavcodec/vorbisdec.c in FFmpeg before 2.4.2, as used in Google...CVE-2014-7937Fix available7.5 HighJanuary 22, 2015
google chromeUse-after-free vulnerability in the DOM implementation in Blink, as used in Google Chrome before...CVE-2014-7934Fix available7.5 HighJanuary 22, 2015
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open